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THE EMBODIMENTS OF THE INVENTION IN WHICH AN EXCLUSIVE 
PROPERTY OR PRIVILEGE IS CLAIMED ARE DEFINED AS FOLLOWS: 

I, A method for determining a result of a group operation performed an integral 
number of times on a selected element of the group, said method comprising the steps of 

(a) representing said integral number as a binary vector; 

(b) initializing an intermediate element to the group identity element; 

(c) selecting successive bits, beginning with a left most bit, of said vector and 
for each of said selected bits; 

(i) performing said group operation on said intermediate element to 
derive a new intermediate element; 

(ii) replacing said intermediate element with said new intermediate 
element; 

(iii) performing said group operation on said intermediate element 
and an element, selected from the group consisting of: 

said group element if said selected bit is a one; and 

an inverse element of said group element if said selected bit 

is a zero; 

(iv) replacing said intermediate element with said new intermediate 
element; 

(d) performing said group operation on said intermediate value and said 
inverse element if said last selected bit is a zero; and replacing said 
intermediate element therewith, to obtain said result, whereby each of the 
bits of said integral is processed with substantially equal operations 
thereby minimizing timing attacks on said cryptographic system. 



2, A method as deflned in claim I, said group being a multiplicative group Fp* said 
group element being an integer, and said group operation being exponentiation g^ and 
an inverse element being the multiplicative inverse 1/g. 
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3. A method as defined in claim 1 , said group being an additive group E( F^^ ) and said 
group operation being addition of points. 

4. A method as defined in claim 1, said group being an additive group E(F^), said group 
5 element being a point P with coordinates (x,y) on the elliptic curve, and said group 

operation being the scalar multiple kP of said point and an inverse element being the 
negative -P of said point. 

5. A method as defined in claim 1 , said integral value being a private key k. 

10 

6. A method of performing a selected group operation on a scalar and a selected element 
of said group, in a cryptographic processor, said method comprising the steps of: 

representing said scalar as a binary vector; 

recoding said binary vector to produce a signed digit representation of 
1 5 plus one and minus one digits; 

selecting each of said receded bits sequentially and for each of said 
selected bits performing said group operation on an intermediate element to derive 
a new intermediate element; and adding or subtracting said selected element to 
said intermediate element in accordance with said sign if said digit being selected; 
20 and 

outputting said intermediate value as a result of said group operation. 
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